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SPECIFICATION 



TITLE OF THE INVENTION 

Data Reproduction System, Data Recorder and Data Reader 
Preventing Fraudulent Usage by Monitoring Reproducible Time Limit 
BACKGROUND OF THE INVENTION 
Field of the Invention 

The present invention relates to the technique of reproducing digital 
data only during a term that allows reproduction, particularly to the 
technique of detecting fraudulent modification of the current time in a 
reproduction apparatus including a circuit that detects the current time to 
strictly monitor reproduction of digital data. 
Description of the Background Art 

In accordance with the development of recent digital technology, 
image data and music data recorded on a recording medium in a digital form 
can be reproduced at the user side using a reproduction apparatus. In the 
case where the recording medium is available on a rental basis, the user can 
reproduce the video and music using a reproduction apparatus if within a 
preset reproduction term. Here, determination of whether reproduction is 
allowed or not is made based on the detected time at the user's reproduction 
apparatus and the reproduction time limit information recorded in the 
recording medium. If the current time detected by the user's reproduction 
apparatus is improperly modified, the content can be reproduced even if the 
reproduction time limit has expired. Monitoring the time detect by the 
user's reproduction apparatus is a critical factor. 

Japanese Patent Laying-Open No. 8-235402 discloses a time 
recorder detecting any fraudulent modification of time. The time recorder 
disclosed in this publication monitors time based on the time of an internal 
clock. The time recorder includes a first detection circuit detecting time at 
high accuracy, a second detection circuit detecting time at lower accuracy 
than the first detection circuit, a circuit storing in-and-out time data 
representing the arrival and departure time based on the time detected by 
the second detection circuit, a calculation circuit calculating the time 
difference between the first detection circuit and the second detection circuit 
every time the in-and-out time data is input, a determination circuit 



determining whether the absolute value of the calculated time difference 
exceeds a reference time, and a circuit recording the modification history 
when the time difference exceeds the reference time. 

The first detection circuit has the time set only by an administrator. 
The second detection circuit is adjusted to the time detected by the first 
detection circuit, when there is error in time, by an individual other than the 
administrator. The time recorder includes two detection circuits to detect 
the time, and determines whether the time is modified or not based on the 
calculation of the time difference obtained according to the time detected by 
the first detection circuit of higher detection accuracy. Accordingly, the 
history of the time being modified improperly is recorded when the time 
difference calculated by the calculation circuit exceeds a reference time. 

It is to be noted that this time recorder requires a first detection 
circuit that detects time at high accuracy, which is expensive. Although the 
time can be monitored strictly in a reproduction circuit reproducing digital 
data, the usage of such a first detection circuit will increase the cost of the 
reproduction apparatus. 
SUMMARY OF THE INVENTION 

An object of the present invention is to provide a data reproduction 
system, a data recorder, and a data reader strictly monitoring the 
reproduction time limit to determine whether digital data output is allowed 
or not. 

Another object of the present invention is to provide a data 
reproduction system, a data recorder and a data reader strictly monitoring 
the reproduction time limit with respect to fraudulent usage by a user of a 
reproduction apparatus to determine whether digital data output is allowed 
or not. 

A further object of the present invention is to provide a data 
reproduction system, a data recorder and a data reader detecting fraudulent 
operation of the time by the user of a reproduction apparatus. 

Still another object of the present invention is to provide an 
economical data reproduction system, a data recorder and a data reader 
strictly monitoring the reproduction time limit to determine whether digital 



data output is allowed or not. 

A still further object of the present invention is to provide a data 
reproduction system, a data recorder and a data reader detecting the current 
time based on the reproduced time of digital data using the data reader. 

According to an aspect of the present invention, a data reproduction 
system reads, using a data reader, data written in a recording medium using 
a data recorder. The data recorder includes a storage circuit storing data, a 
detection circuit detecting the date, a set circuit setting the time limit of 
allowing data output using the data reader, and a record circuit connected to 
the storage circuit, the detection circuit and the set circuit to record into a 
recording medium the data stored in the storage circuit, the time limit set by 
the set circuit, and the recorded date of the data and time limit detected by 
the detection circuit. The data reader includes a detection circuit detecting 
the date, a read circuit reading out the time limit and recorded date from the 
recording medium, a determination circuit connected to the detection circuit 
and read circuit of the data reader to determine whether output of the data 
recorded in the recording medium is allowed or not based on the time limit 
and recorded date read out by the read circuit and the current date detected 
by the detection circuit, and an output circuit connected to the 
determination circuit to read out data from the recording medium for output 
when data output is allowed. 

The data recorder sets the time limit that allows data output using 
the data reader to record to the recording medium data, time limit, and date 
of recording the data and time limit to the recording medium. The data 
reader determines whether output of the data recorded in the recording 
medium is allowed or not based on the time limit and recorded date read out 
from the recording medium and the detected current date. Consider the 
case where the time limit allowing data output has elapsed and the user 
improperly modifies the current date that will be detected by the detection 
circuit of the data reader to a date before the recorded date to attempt 
improper data output. Since the improperly modified current date is before 
the recorded date of the data, the determination circuit determines that data 
output is not allowed. Thus, an inexpensive data reproduction system 



monitoring the reproduction time limit to output digital data can be 
provided. 

Preferably, the data reader includes an overwrite circuit connected 
to the detection circuit of the data reader to overwrite the recorded date 
5 recorded in the recording medium with the current date detected by the 
detection circuit. 

The recorded date in the recording medium is overwritten with the 
current date by the overwrite circuit. Consider the case where the time 
limit allowing data output has elapsed and the current date that will be 
? 10 detected by the detection circuit of the data reader has been modified 
C3 improperly. Until the time limit allowing data output expires, the proper 

~£ current date is detected and the proper current date is recorded in the 

U recorded date region of the recording medium. After the time limit has 

f J elapsed, the user improperly modifies the current date that will be detected 

y 15 by the detection circuit to attempt improper data output. Since the current 
3 date is before the date when the data has been recorded (the date 

jfy overwritten by the proper current date), the determination circuit 

1 determines that data output is not allowed. 

;i Further preferably, the determination circuit includes a circuit that 

20 determines output of the data recorded in the recording medium is allowed if 
the current date is after the recorded date and before the time limit. 

When the current date detected by the detection circuit of the data 
reader is not improperly modified and the current date is within the time 
limit where data output is allowed, determination is made that the data 
25 recorded in the recording medium can be output. 

Further preferably, the detection circuit includes a circuit detecting 
the date of commencing data output, a circuit detecting the elapsed time 
from the date of commencing output, and a circuit detecting the current time 
based on the date of commencing output and the elapsed time. 
30 Consider the case where the current date detected by the detection 

circuit is modified improperly after commencing data output. The current 
time detected by the detection circuit of the data reader is calculated by 
adding the elapsed time from the date of commencing output to the date of 
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commencing data output. Accordingly, the proper current time can be 
calculated even if a user improperly modifies the current time after 
commencing data output. 

Further preferably, the data reader includes an incorrect date 
5 detection circuit detecting that the current time is not correct when the 
current time is before the recorded date. 

Detection is made that the current date is not correct by the incorrect 
date detection circuit. Improper modification of the current date in the 
data recorder by a user can be detected. 
10 Further preferably, the data reader includes a processing circuit 

connected to the incorrect date detection circuit to disable data output from 
the recording medium when detection is made that the current time is not 
correct. 

When detection is made that the current date is not correct, the 
15 processing circuit effects a process to disable data output from the recording 
medium. Accordingly, a fraudulent act by the user of the data reader will 
cause erasure or the like of the entire data recorded in the recording 
medium. 

Further preferably, the data reader includes a monitor date storage 
20 circuit connected to the detection circuit of the data reader to store the date 
detected by the detection circuit of the data reader as the monitor date. The 
determination circuit includes a circuit determining whether output of data 
recorded in the recording medium is allowed or not based on the time limit, 
the recorded date, the monitor date, and the current date. 
25 The data reader stores the monitor date. The monitor date is the 

date detected by the detection circuit of the data reader. The determination 
circuit determines that output of data recorded in the recording medium is 
allowed when the current date is, for example after the recorded date, after 
the monitor date, and before the time limit. Even if a user improperly 
30 modifies the current date to a date after the recorded date, before the 

monitor date, and before the time limit to attempt improper data output, the 
determination circuit determines that data output is not allowed since the 
current date is before the monitor date. 
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According to another aspect of the present invention, a data record 
method includes the steps of preparing data, detecting the date, setting a 
time limit allowing data output using a data reader, and recording into the 
recording medium the prepared data, the set time limit, and the recorded 
date of the data and time limit detected at the step of detecting the date. 

According to the data record method, the time limit of data output 
using the data reader is set, and the data, the time limit, and the recorded 
date of the data and time limit to the recording medium are recorded in the 
recording medium. The data reader determines whether output of data 
recorded in the recording medium is allowed or not based on the time limit 
and recorded date read out from the recording medium and the detected 
current date. Consider the case where the time limit of data output has 
elapsed and a user improperly modifies the current date that will be 
detected by the data recorder to a date prior to the recorded date to attempt 
data output. The data reader determines that data output is not allowed 
since the current date improperly modified is before the date when data has 
been recorded. 

According to a further aspect of the present invention, a data read 
method includes the steps of detecting the date, reading out the time limit 
and recorded date from a recording medium, determining whether output of 
data recorded in the recording medium is allowed or not based on the time 
limit and recorded date read out and the current date detected at the step of 
detecting the date, and reading out data from the recording medium for 
output when data output is allowed. 

According to the data read method, the time limit and recorded date 
are read out from the recording medium recorded with data, the time limit, 
and the recorded date of the data and time limit in the recording medium. 
By the data read method, determination is made whether output of the data 
recorded in the recording medium is allowed or not based on the time limit 
and recorded date and the detected current time. Consider the case where 
the time limit of data output has elapsed and a user improperly modifies the 
current date that will be detected by the detection circuit of the data reader 
to a date before the recorded date. Since the current date improperly 



modified is before the date when data has been recorded, determination is 
made that data output is not allowed. 

The foregoing and other objects, features, aspects and advantages of 
the present invention will become more apparent from the following detailed 
description of the present invention when taken in conjunction with the 
accompanying drawings. 
BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 shows an entire structure of a data reproduction system 
according to an embodiment of the present invention. 

Fig. 2 is a control block diagram of a data recorder. 

Fig. 3 is a control block diagram of a data reader. 

Fig. 4 is a control block diagram of a memory card. 

Fig. 5 shows data recorded in a memory card. 

Fig. 6 is a flow chart of a control procedure of a recording process 
according to an embodiment of the present invention. 

Fig. 7 is a flow chart of a control procedure of a data read process 
according to an embodiment of the present invention. 

Fig. 8 shows a first proper operation according to an embodiment of 
the present invention. 

Fig. 9 shows a first improper operation according to an embodiment 
of the present invention. 

Fig. 10 shows a second proper operation according to an embodiment 
of the present invention. 

Fig. 11 shows a second improper operation according to an 
embodiment of the present invention. 

Figs. 12 and 13 show improper operations of first and second 
modifications, respectively, of an embodiment of the present invention. 

Figs. 14-18 are control block diagrams of a recording medium. 

Fig. 19 shows data recorded in a recording medium. 
DESCRIPTION OF THE PREFERRED EMBODIMENTS 

Embodiments of the present invention will be described hereinafter 
with reference to the drawings. In the following description, the same 
components have corresponding reference characters allotted. Their 



designations and functions are identical. Therefore, detailed description 
thereof will not be repeated, where appropriate. 
First Embodiment 

Referring to Fig. 1, a data reproduction system according to a first 
embodiment includes a data recorder 100 recording data into a memory card 
200, a data reader 300 reading out data from memory card 200, a data 
distribution server 400 transmitting data to data recorder 100, and a 
network 500 connecting data recorder 100 and data distribution server 400. 

Data recorder 100 temporarily stores data representing images, 
video and music received from data distribution server 400. Data recorder 
100 records the temporarily stored data into memory card 200 in response to 
a user's request. Data recorder 100 is installed at a site where many people 
gather such as a terminal building or a convenience store. 

Data reader 300 is installed at the home of a user, for example. 
Data reader 300 reads out data recorded in memory card 200 using data 
recorder 100. Data reader 300 outputs an image, video and music based on 
the data read out from memory card 200. 

Memory card 200 is a recording medium that can be carried by a 
user. For example, memory card 200 is a recording medium in the form of a 
card employing a semiconductor memory. 

Data distribution server 400 stores data representing an image, 
video and music. Data distribution server 400 distributes these data to a 
plurality of data recorders 100 via network 500. 

The structure of data recorder 100 of the present embodiment will be 
described with reference to Fig. 2. Referring to Fig. 2, data recorder 100 
includes a storage unit 110 to store various data, a real time clock 130 
detecting the current date, an interface unit 140 to communicate with an 
external apparatus, an input/output unit 150 to input a user's operation and 
to output data, and a CPU (Central Processing Unit) 120 connected to 
storage unit 110, real time clock 130, interface unit 140 and input/output 
unit 150 to control data recorder 100. 

Storage unit 110 includes a ROM (Read Only Memory) 112 storing a 
program to control data recorder 100, a secret key used to decode the 



encryption of digital data, and the like, a RAM (Random Access Memory) 
1 14 to store data during execution of the program, and a nonvolatile memory 
1 16 storing data representing the image, video and music received from data 
distribution server 400. A plurality of secret keys are stored in ROM 112. 
The relationship between a secret key and a user ID (Identification) is stored 
in RAM 114. The user ID is information adopted by data recorder 100 to 
identify a user in the data reproduction system. 

Interface unit 140 includes a network interface 142 to receive data 
from data distribution server 400 connected on network 500, and a memory 
card interface 144 to be connected to memory card 200 to communicate 
therewith. Memory card 200 is attached to memory card interface 144. 
Memory card interface 144 is under control of CPU 120 to read out data from 
memory card 200 and record data into memory card 200. 

Input/output unit 150 includes a display unit 152 displaying a list of 
data representing an image, video and music stored in nonvolatile memory 
116 as well as an operation procedure, and an operation unit 154 for the 
operation of a user to select data to be recorded into memory card 200 from 
the list of data displayed on display unit 152. The user initializes a 
memory card according to the operation procedure displayed at display unit 
150. 

The structure of data reader 300 of the present embodiment will be 
described with reference to Fig. 3. Data reader 300 includes a memory card 
interface 344 instead of interface unit 140 of data recorder 100. Data 
reader 300 includes an audio output unit 356 in addition to the structure of 
input/output unit 150 of data recorder 100. 

Memory card interface 344 is equivalent to memory card interface 
144 described above. Audio output unit 356 provides audio output based on 
the digital data recorded in memory card 200. 

ROM 112 and RAM 314 shown in Figs. 2 and 3, respectively, store 
secret keys to decode encryption of digital data employed in the data 
reproduction system. A user ID and the relationship between a secret key 
and a user ID are stored in RAM 1 14 and RAM 3 14. The current date 
detected by real time clock 330 is stored in nonvolatile memory 316 of data 



reader 300. The current date stored in nonvolatile memory 316 is called 
"the latest time of reader". 

The structure of memory card 200 will be described with reference to 
Fig. 4. Memory card 200 includes a memory card interface 202, and a RAM 
204 connected to memory interface 202. Memory card interface 202 
communicates with data recorder 100 or data reader 300 via memory card 
interface 114 or memory card interface 344, respectively. 

The data recorded in RAM 204 of memory card 200 of Fig. 4 will be 
described with reference to Fig. 5. The data recorded in RAM 204 includes 
a secret key, a reproduction key encrypted with the secret key, and user data. 
In the present data reproduction system, an encryption process according to 
the DES (Data Encryption Standard) is employed. 

The user data includes the latest time, monitor information, and 
digital data encrypted using a reproduction key. The latest time 
corresponds to the current date detected by real time clock 330. The latest 
time recorded in memory card 200 is called "the latest time of memory card". 

The monitor information includes information corresponding to the 
type of the recorded digital data. For example, consider the case where 
three types of digital data are recorded in memory card 200. In this case, 
three monitor information are recorded. The monitor information includes 
first monitor information, second monitor information and third monitor 
information. For example, the first monitor information includes a data ID 
to identify the first data under control of the first information, the file name 
of the first digital data, index data representing a general description of the 
first digital data, the reproduction time limit of the first digital data, and a 
flag. The flag serves to identify whether reproduction of respective digital 
data is allowed or not. Digital data cannot be reproduced if this flag is 
reset. 

The secret key stored in ROM 112 of data recorder 100, RAM 314 of 
data reader 300 and RAM 204 of memory card 200 is set for each user of the 
present system. Memory card 200 of Fig. 4 can have data recorded only 
through data recorder 100 of the present data reproduction system, and can 
have data read out only through data reader 300 of the present data 
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reproduction system. 

Initialization of memory card 200 will be described here. For the 
purpose of mutual authentication of memory card 200 and data recorder 100, 
memory card 200 must be initialized. 

A user sets a memory card 200 that is not yet initialized in data 
recorder 100. Data recorder 100 selects the user ID of the user of the data 
reproduction system. Data recorder 100 selects one secret key stored in 
ROM 1 12. Data recorder 100 records the relationship between the user ID 
and secret key in RAM 114. Data recorder 100 displays the user ID and 
secret key at display unit 132. The user notes the displayed user ID and 
secret key. Data recorder 100 records the secret key into RAM 204 of 
memory card 200. Digital data is recorded into memory card 200 subjected 
to such initialization. 

Initialization of data reader 300 will be described here. For the 
purpose of mutual authentication between memory card 200 and data 
reader 300, data reader 300 must be initialized. 

The user inputs the noted user ID and secret key to data reader 300. 
Data reader 300 stores the input user ID and secret key in RAM 314. 
Memory card 200 is set in data reader 300 initialized as described above to 
read out digital data. 

Referring to Fig. 6, the program executed by data recorder 100 has a 
control structure as set forth below as to a record process. 

At step (abbreviated as "S" hereinafter) 100, CPU 120 of data 
recorder 100 determines whether mutual authentication with memory card 
200 set in data recorder 100 has been performed or not. The user sets 
memory card 200 in memory card interface 144. The user inputs a user ID 
through operation unit 154 of data recorder 100. CPU 120 reads the secret 
key recorded in RAM 204 of memory card 200 via memory card interface 144. 
CPU 120 determines whether the secret key recorded in RAM 204 of memory 
card 200 matches the secret key stored in ROM 112 of data recorder 100, and 
whether the user ID stored in RAM 114 corresponding to the matching 
secret key matches the input user ID. Determination is made that mutual 
authentication is verified when the secret keys and user IDs respectively 
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match each other. When mutual authentication between data recorder 100 
and memory card 200 is verified (YES at S100), control proceeds to S102. If 
mutual authentication is not verified (NO at S100), control proceeds to S 112. 
Mutual authentication between data recorder 100 and memory card 200 is 
denied when a memory card not corresponding to the present data 
reproduction system is used, when a memory card not initialized is used, 
and when a memory card of a proper user is used by an improper user. 

At S102, CPU 120 displays at display unit 152 a list of digital data 
stored in data recorder 100 based on the index of digital data stored in 
nonvolatile memory 116. 

At S104, CPU 120 requests the user to select digital data recorded in 
memory card 200. Here, a request to select digital data from the displayed 
list is provided on display unit 152. 

At S106, CPU 120 reads the requested digital data from nonvolatile 
memory 116 to record the digital data into RAM 204 of memory card 200. 
Nonvolatile memory 116 is recorded with digital data that is encrypted 
using a reproduction key. Encrypted digital data is recorded in RAM 204 of 
memory card 200. 

At S108, CPU 120 records the current date detected by real time 
clock 130 as "the latest time of memory card". At Si 10, CPU 120 records 
into memory card 200 monitor information corresponding to the digital data 
recorded in memory card 200. 

At SI 12, CPU 120 carries out an error process when mutual 
authentication between data recorder 100 and memory card 200 is not 
verified. Here, CPU 120 provides a display indicating that mutual 
authentication is not allowed at display unit 152 as the error process. 

Referring to Fig. 7, the program executed by data reader 300 has a 
control structure set forth below as to a read process. 

At S200, CPU 320 of data reader 300 determines whether mutual 
authentication between data reader 300 and memory card 200 has been 
verified or not. This mutual verification at S200 is similar to the mutual 
authentication of S 100, provided that data reader 300 is concerned. The 
user sets memory card 200 in memory card interface 344. The user inputs 
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the user ID through operation unit 354 of data reader 300. CPU 320 reads 
the secret key recorded in RAM 204 of memory card 200 and the relationship 
between the secret key and user ID via memory card interface 344. CPU 
320 determines whether the secret key stored in RAM 204 of memory card 
5 200 matches the secret key stored in RAM 314 of data reader 300 and 

whether the user ID stored in RAM 314 in relationship with the matching 
secret key matches the input user ID. Determination is made that mutual 
authentication has been verified when respective secret keys and user IDs 
match each other. When mutual authentication between data reader 300 

i* 10 and memory card 200 has been verified (YES at S200), control proceeds to 

g S202, and otherwise (NO at S200), control proceeds to S222. 

5 At S202, CPU 320 displays a list of the digital data recorded in 

|j memory card 200 at display unit 352 using the index of the digital data 

pk stored in RAM 204 of memory card 200. 

/W 15 At S204, CPU 320 requests the user to select the digital data to be 

p reproduced. Here, a request to select digital data from the list at display 

JU unit 352 is provided at display unit 352. 

§ At S206, CPU 320 reads the flag of the selected digital data. At 

£3 S208, CPU 320 determines whether the read flag is set or not. When the 

|c * 20 flag is set (YES at S208), control proceeds to S2 10, and otherwise (NO at 
S208), control proceeds to S222. 

At S210, CPU 320 determines whether the current date detected by 
real time clock 330 is later than or equal to "the latest time of memory card" 
recorded in memory card 200. When the detected current date is later than 
25 or equal to "the latest time of memory card" (YES at S2 10), control proceeds 
to S212, and otherwise (NO at S210), control proceeds to S222. 

At S212, CPU 320 determines whether the current date detected by 
real time clock 330 is later than or equal to "the latest time of reader" stored 
in nonvolatile memory 316. When the detected current date is later than or 
30 equal to "the latest time of reader" (YES at S2 12), control proceeds to S2 14, 
and otherwise (NO at S212), control proceeds to S222. 

The case where the detected current date is earlier than "the latest 
time of memory card" or "the latest time of reader" corresponds to the case 
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where the current date has been put forward. This means that the user has 
deceitfully operated real time clock 330 of data reader 300 for the purpose of 
fraudulent reproduction after expiration of the reproduction time limit 

At S214, CPU 320 determines whether the current date detected by 
real time clock 330 is before or equal to the reproduction time limit recorded 
in memory card 200. When the detected current date is before or equal to 
the reproduction time limit (YES at S214), control proceeds to S216, and 
otherwise (NO at S214), control proceeds to S222. 

At S216, CPU 320 reads out the digital data selected at S204 from 
RAM 204 of memory card 200. The digital data encrypted by the 
reproduction key is decrypted and output from display unit 352 and audio 
output unit 356. The reproduction key is a decrypted version of the 
reproduction key encrypted using a secret key. 

At S2 18, CPU 320 determines whether reproduction has ended or 
not. Upon completion of digital data reproduction (YES at S2 18), control 
proceeds to S220, and otherwise (NO at S218), control returns to S216 to 
further carry out reproduction of digital data. 

At S220, CPU 320 overwrites "the latest time of reader" recorded in 
nonvolatile memory 316 and "the latest time of memory card" recorded in 
memory card 200 with the current date detected by real time clock 330. 
Accordingly, "the latest time of reader" and "the latest time of memory card" 
are updated, and the reproduction process ends. 

When mutual authentication is not verified (NO at S200), when the 
flag is reset (NO at S208), when the current date is earlier than "the latest 
time of memory card" (NO at S210), when the current date is earlier than 
"the latest time of reader" (NO at S212), or when the current date is later 
than the reproduction time limit (NO at S214), CPU 320 carries out an error 
process at S222. In this error process, CPU 320 resets the flag and erases 
the digital data. 

Failure of mutual authentication means that an improper user has 
used memory card 200. Therefore, all the digital data recorded in memory 
card 200 is erased. In the case where the current date is before "the latest 
time of memory card" and the current time is before "the latest time of 
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reader", determination is made that real time clock 330 of data reader 300 
has been operated improperly. Therefore, all the digital data recorded in 
memory card 200 is erased. In the case where the current date is after the 
reproduction time limit, only the digital data corresponding to the elapsed 
reproduction time limit is erased. 

The operation of a data reproduction system according to the above- 
described structure and flow charts will be described hereinafter. 
Data record operation: memory card initialization 
In order to initialize memory card 200, the user sets memory card 
200 in data recorder 100. Upon the request of memory card initialization 
by the user, data recorder 100 selects a user ID and secret key. The 
selected user ID and secret key are displayed on display unit 152. The 
secret key is recorded in EAM 204 of memory card 200. The relationship 
between the secret key and user ID is recorded in RAM 114 of data recorder 
100. 

Data Record Operation 

The operation of recording digital data into an initialized memory 
card 200 will be described here. The user establishes connection between 
the initialized memory card 200 and data recorder 100 via memory card 
interface 144 of data recorder 100. The user inputs his/her own user ID 
through operation unit 152. Data recorder 100 reads out the secret key 
from memory card 200. Mutual authentication between data recorder 100 
and memory card 200 is conducted based on the secret key read out and the 
secret key stored in ROM 112 as well as the relationship between the secret 
key and user ID stored in RAM 114 and the input user ID. 

When mutual authentication is verified (YES at S100), a list of 
digital data is provided on display unit 152 based on the index of digital data 
stored in nonvolatile memory 1 16 (S 102). The user selects the digital data 
to be recorded in memory card 200 from the displayed list. The selected 
digital data is recorded in RAM 204 of memory card 200 (S106). Here, the 
digital data recorded in RAM 204 is encrypted using a reproduction key. 

The current date detected by real time clock 130 is recorded as "the 
latest time of memory card" (S 108). Monitor information is generated and 
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recorded in RAM 204 of memory cad 200 (S 1 10). Thus, the digital data as 
shown in Fig. 5 is recorded in memory card 200 of a user. 
Data read operation: data reader initialization 
A user initializes data reader 300 to reproduce data from memory 
card 200 through data reader 300. For initialization of data reader 300, the 
user enters his/her user ID and secret key through operation unit 354. 
Data reader 300 stores the user ID and secret key in RAM 314. 
Data read operation: mutual authentication 

The operation of reading out digital data recorded in memory card 
200 using an initialized data reader 300 will be described here. Prior to 
reading out digital data, mutual authentication is conducted. 

The user establishes connection between memory card 200 in which 
digital data is recorded and data reader 300 via memory card interface 344 
of data reader 300. The user enters his/her user ID through operation unit 
354. Data reader 300 reads out the secret key from memory card 200. 
Mutual authentication between data reader 300 and memory card 200 is 
conducted based on the secret key read out and the secret key stored in RAM 
3 14 as well as the relationship between the secret key and the user ID stored 
in RAM 3 14 and the input user ID. 

When mutual authentication is verified (YES at S200), a list of 
digital data is provided on display unit 352 based on the index of the digital 
data recorded in RAM 204 of memory card 200 (S202). The user selects the 
digital data to be reproduced recorded in memory card 200 from the 
displayed list. Description is provided hereinafter with discrimination 
between a proper operation and an improper operation. 

Data read operation: first proper operation 

A first proper operation of data reader 300 will be described with 
reference to Fig. 8. It is assumed that digital data is recorded in memory 
card 200 by data recorder 100 on January 1, 2001. It is assumed that the 
reproduction time limit of this digital data is January 6, 200 1. By the 
recording operation of data recorder 100, January 1, 2001 is recorded as "the 
latest time of memory card" in RAM 204 of memory card 200. The latest 
time is not limited to the aforementioned date, and may include even the 
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hour, minute and second. 

As shown in Fig. 8, the digital data recorded in memory card 200 is 
reproducible from January 1, 2001 to January 6, 2001, and cannot be 
reproduced from January 7, 2001 and afterwards. The current date 
detected by real time clock 330 sequentially changes from January 1, 2001 to 
January 7, 2001. 

Consider the case where digital data is to be reproduced using data 
reader 300 on January 4, 2001 before the reproduction time limit. The 
current date (January 4, 2001) is later than "the latest time of memory card" 
(January 1, 2001) (YES at S210); the current date (January 4, 2001) is equal 
to "the latest time of reader" (January 4, 2001) (YES at S212); and the 
current date (January 4, 2001) is before the reproduction time limit 
(January 6, 2001) (YES at S2 14). Therefore, the digital data is read out 
from memory card 200 to be output (S216). 

Consider the case where digital data is to be reproduced using data 
reader 300 on January 7, 2001 after the reproduction time limit. The 
current date (January 7, 2001) is later than "the latest time of memory card" 
(January 1, 2001) (YES at S210); the current time (January 7, 2001) is equal 
to "the latest time of reader" (January 7, 2001) (YES at S212); and the 
current date (January 7, 2001) is after the reproduction time limit (January 

6, 200 1) (NO at S2 14). Therefore, the digital data will not be read out from 
memory card 200 to be output. 

Data read operation: first improper operation 

The first improper operation at data reader 300 will be described 
with reference to Fig. 9. It is assumed that the user of data reader 300 
improperly operates real time clock 330 to attempt reproduction on January 

7, 200 1 after the reproduction time limit. It is assumed that the user has 
improperly modified the current date that is to be detected by real time clock 
330 of data reader 300 from January 7, 2001 to December 31, 2000. 
Accordingly, the current date of data reader 300 becomes December 31, 2000 
after the fraudulent operation. 

On January 7, 2001, the user reads out the digital data recorded in 
memory card 200 using data reader 300 that is subjected to fraudulent 



- 17- 



operation. Here, the current date (December 31, 2000: fraudulent 
operation) is before "the latest time of memory card" (January 1, 2001), NO 
at S210). Therefore, an error process is conducted (S222). Determination 
is made that real time clock 330 of data reader 300 has been operated 
improperly, and all the digital data recorded in memory card 200 is erased. 

Data read operation: second proper operation 

The second proper operation of data reader 300 will be described 
with reference to Fig. 10. 

It is assumed that digital data has been recorded into the memory 
card by data recorder 100 on January 1, 200 1. It is assumed that the 
reproduction time limit of this digital data is January 3, 200 1. January 1, 
2001 is recorded as "the latest time of memory card" in RAM 204 of the 
memory card. 

Consider the case where digital data recorded in the memory card is 
to be reproduced using data reader 300 on January 3, 2001 that is within the 
reproduction time limit. The user sets the memory card in data reader 300. 
The current date detected by real time clock 330 (January 3, 2001) is after 
"the latest time of memory card" recorded in the memory card (January 1, 
2001) (YES at S210), equal to "the latest time of reader" stored in data 
reader 300 (January 3, 2001) (YES at S212), and equal to the reproduction 
time limit (January 3, 2001) (YES at S214). Therefore, digital data is read 
out from the memory card to be reproduced. 

Consider the case where the digital data recorded in the memory 
card is to be reproduced on January 4, 2001 after the reproduction time limit. 
In this case, the detected current time (January 4, 2001) is after "the latest 
time of memory card" (January 1, 2001) (YES at S210), equal to "the latest 
time of reader" (January 4, 2001) (YES at S212), and has passed the 
reproduction time limit (January 3, 2001) (NO at S214). Therefore, an 
error process is conducted (S222). At this stage, the flag corresponding to 
the relevant digital data is reset, and that digital data is erased. 

Data read operation: second improper operation 

A second improper operation at data reader 300 will be described 
with reference to Fig. 11. The user of data reader 300 possesses two 
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memory cards, i.e. a first memory card and a second memory card. It is 
assumed that the second memory card is inhibited of digital data 
reproduction on January 3, 200 1 . January 3, 200 1 is recorded as "the latest 
time of memory card" in RAM 204 of the second memory card, and recorded 
5 as the "latest time of reader" in nonvolatile memory 316. The first memory 
card is the memory card in the aforementioned second proper operation. It 
is assumed that the user of data reader 300 improperly operates real time 
clock 330 on January 4, 2001 after the reproduction time limit to attempt to 
reproduce digital data. It is assumed that the user has improperly 
10 modified the current date to be detected by real time clock 330 of data reader 
r Z 300 to January 2, 2001 from January 4, 2001. Therefore, the current date 

£3 of data reader 300 after the fraudulent operation becomes January 2, 2001. 

|f ■ On January 4, 200 1, digital data recorded in the first memory card is 

|)i read out using data reader 300 subjected to fraudulent operation by the user. 

|-j 15 In this case, the current date (January 2, 2001: after fraudulent operation) is 
s after "the latest time of memory card" (January 1, 2001) (YES at S210), and 

i;* before "latest time of reader" (January 3, 2001) (NO at S2 12). Therefore, 

an error process is conducted (S222). In this case, determination is made 
||1 that real time clock 330 of data reader 300 has been operated improperly. 

J J 20 All the digital data recorded in memory card 200 is erased. 

According to the data reproduction system of the present 
embodiment, the detected current date is recorded into the memory card by 
the data recorder in recording data by the data recorder. The current date 
detected by the data reader is stored in the storage unit of the data reader. 
25 In a data reproduction mode, fraudulent operation of the current date at the 
data reader is detected based on "the latest time of memory card" recorded in 
the memory card and "latest time of reader" stored in the storage unit of the 
reader as well as the current date detected by the real time clock of the 
reader. When the current date of the data reader has not been operated 
30 improperly and is within the reproduction time limit, the digital data 

recorded in the memory card is reproduced. Thus, an inexpensive data 
reproduction system that can output data through the reproduction time 
limit can be realized. 
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First Modification of First Embodiment 

A first modification of the above first embodiment will be described 
hereinafter with reference to Fig. 12. 

This modification is directed to overwriting "the latest time of 
memory card" recorded in memory card 200 set in data reader 300 with the 
current time detected by data reader 300. 

As shown in Fig. 12, "the latest time of memory card" is overwritten 
with the current date detected by real time clock 330 of data reader 300 for 
every predetermined time. Therefore, "the latest time of memory card" 
recorded in memory card 200 is modified over time. 

It is assumed that digital data has been recorded into memory card 
200 on January 1, 2001 using data recorder 100. It is assumed that the 
reproduction time limit of this data is January 6, 2001. 

Consider the case where the user of data reader 300 improperly 
operates real time clock 330 on January 7, 2001 after the reproduction time 
limit to attempt reproduction. It is assumed that the user has modified the 
current time that is to be detected by real time clock 330 in data reader 300 
to January 6, 2001 from January 7, 2001. Therefore, the current date 
detected by data reader 300 becomes January 6, 2001 after the fraudulent 
operation. 

On January 7, 2001, the user reads out the digital data recorded in 
memory card 200 using data reader 300 subjected to fraudulent operation. 
In this case, the current date (January 6, 2001: after fraudulent operation) is 
before "the latest time of memory card" (January 7, 2001), (NO at S210). 
Therefore, an error process is conducted (S222). Determination is made 
that real time clock 330 in data reader 300 has been operated improperly, 
and all the digital data recorded in memory card 200 is erased. 

Second Modification of the First Embodiment 

A second modification of the first embodiment will be described with 
reference to Fig. 13. The second modification is directed to recording "the 
latest time of memory card" independent of the current date detected by real 
time clock 330 of data recorder 300. 

Data reader 300 of the second modification includes a counter that 
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can calculate the elapsed time in addition to real time clock 330. As shown 
in Fig. 13, upon commencing reproduction of the digital data recorded in 
memory card 200 on January 1, 2001, the elapsed time from the start of 
reproduction is detected by the counter. The elapsed time detected by the 
5 counter is added to the current date detected when reproduction is 
commenced to calculate the current date. 

Thus, "the latest time of memory card" is recorded properly in 
memory card 200 even in the case where real time clock 330 is not subjected 
to fraudulent operation at the time of commencing reproduction and 
10 subjected to fraudulent operation after reproduction is commenced (for 
example, in the case where real time clock 330 is subjected to fraudulent 
O operation on January 4, 2001). 

|f The operation of real time clock 330 operated improperly on January 

m 7 in data reader 300 of the second modification is similar to that of the first 

|; 15 modification. Therefore, detailed description thereof will not be repeated 
b ' here. 

J;t According to the second modification, advantages similar to those of 

\ : the first embodiment can be obtained. An inexpensive data reproduction 

/; system monitoring reproduction time limit to reproduce digital data can be 

g 20 realized. 

Second Embodiment 

The second embodiment is directed to recording media of types other 
than that of the memory card of the previous first embodiment. The 
remaining elements of the second embodiment other than the change in the 

25 structure of the recording medium are similar to those of the first 

embodiment. Therefore, detailed description of the remaining elements 
will not be repeated here. 

Referring to Fig. 14, a recording medium 210 alternative to memory 
card 200 includes a memory card interface 212, and a record unit 214 

30 connected to memory card interface 2 12 and realized by a magneto-optical 
disc. Since record unit 2 14 is realized by a magneto-optical disc, digital 
data of a large amount (digital data representing video of high definition) 
can be recorded. 
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Referring to Fig. 15, a recording medium 220 alternative to memory 
card 200 includes a memory card interface 222, a first record unit 224 
recording data that has to be rewritten, and a second record unit 226 
recording data that does not have to be rewritten. First and second record 
5 units 224 and 226 are connected to memory card interface 222. "The latest 
time of memory card", a secret key, and the like are recorded in first record 
unit 224. Digital data that does not have to be rewritten is stored in second 
record unit 226. 

According to the second embodiment, data recorder 100 shown in Fig. 

10 1 is dispensable. The user purchases a recording medium 220 having 
g digital data prerecorded in second record unit 226. By setting recording 

Q medium 220 in data reader 300, the digital data recorded in second record 

unit 226 can be reproduced. 
Ill Referring to Fig. 16, a recording medium 230 includes a second 

15 record unit 236 having second record unit 226 of recording medium 220 of 
Z Fig. 15 realized by a magneto-optical disc. Recording medium 230 of Fig. 

Jj* 16 has the advantage of recording digital data of a large amount in second 

jp record unit 236 in addition to the advantage of recording medium 220 of Fig. 

in is. 

20 Referring to Fig. 17, a recording medium 240 includes a second 

record unit 246 having second record unit 236 of recording medium 230 of 
Fig. 16 realized by an optical disc dedicated to reading. 

Referring to Fig. 18, a recording medium 250 alternative to memory 
card 200 of the first embodiment includes a memory card interface 252, and 
25 a record unit 254 connected to memory card interface 252. Record unit 254 
employs an optical disc that can be recorded only one. Record unit 254 is 
recorded with digital data that does not have to be rewritten, in an 
encrypted form. Also, monitor information is recorded in record unit 254. 

The data recorded in record unit 254 of recording medium 250 of Fig. 
18 will be described with reference to Fig. 19. First digital data encrypted 
using a reproduction key and second digital data encrypted using a 
reproduction key are recorded in record unit 254. As the initial monitor 
information, a secret key, a reproduction key encrypted using the secret key, 
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and the latest time of the initialized state are recorded. As the initial 
monitor information, monitor information for the recorded first and second 
digital data is recorded. For example, the first monitor information 
includes a data ID, a file name, index data, a reproduction time limit, and a 
flag. 

As shown in Fig. 19, record unit 254 includes additional record 
information of digital data. The additional monitor information includes 
monitor information of the digital data recorded in addition to the first and 
second digital data. This monitor information is recorded additionally. 

As shown in Figs. 18 and 19, record unit 254 is formed using an 
optical disc that can be recorded only once. Digital data is added to record 
unit 254. Monitor information corresponding to the additionally-recorded 
digital data is added into record unit 254. Accordingly, recording medium 
250 recorded with digital data can be realized. 

Advantages similar to those of the previous first embodiment can be 
realized through the recording medium of the second embodiment. 

Although the present invention has been described and illustrated in 
detail, it is clearly understood that the same is by way of illustration and 
example only and is not to be taken by way of limitation, the spirit and scope 
of the present invention. 
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